AWS singlesignon documentation change
Summary
Added section headers, marked organization instances as 'recommended', and clarified account instance use cases
Security assessment
The changes improve clarity and recommendations (e.g., promoting organization instances) but do not explicitly address security vulnerabilities or add security-specific guidance. The recommendation may indirectly relate to best practices but lacks direct security evidence.
Diff
diff --git a/singlesignon/latest/userguide/identity-center-instances.md b/singlesignon/latest/userguide/identity-center-instances.md index baa917de1..db0273b4b 100644 --- a//singlesignon/latest/userguide/identity-center-instances.md +++ b//singlesignon/latest/userguide/identity-center-instances.md @@ -4,0 +5,2 @@ +AWS account types that can enable IAM Identity Center + @@ -9 +11 @@ An instance is a single deployment of IAM Identity Center. There are two types o - * Organization instance + * Organization instance (recommended) @@ -15 +17 @@ An instance of IAM Identity Center that you enable in the AWS Organizations mana -An instance of IAM Identity Center that is bound to a single AWS account, and that is visible only within the AWS account and AWS Region in which it is enabled. You can enable an account instance from either of the following: +An instance of IAM Identity Center that's bound to a single AWS account, and that's visible only within the AWS account and AWS Region in which it's enabled. Use an account instance for simpler, single-account scenarios. You can enable an account instance from either of the following: @@ -17 +19 @@ An instance of IAM Identity Center that is bound to a single AWS account, and th - * An AWS account that is not managed by AWS Organizations + * An AWS account that isn't managed by AWS Organizations @@ -24,3 +26 @@ An instance of IAM Identity Center that is bound to a single AWS account, and th -Use the following table to compare the capabilities provided by the instance type: - -###### AWS account types that can enable IAM Identity Center +## AWS account types that can enable IAM Identity Center @@ -34 +34 @@ To enable IAM Identity Center, sign in to the AWS Management Console by using on - * A standalone AWS account – Use to create an [organization instance](./organization-instances-identity-center.html) or [account instance](./account-instances-identity-center.html) of IAM Identity Center. The standalone AWS account isn't managed by AWS Organizations. Only one instance of IAM Identity Center be associated with a standalone AWS account and you can use the instance for application assignments within that standalone AWS account. + * A standalone AWS account – Use to create an [organization instance](./organization-instances-identity-center.html) or [account instance](./account-instances-identity-center.html) of IAM Identity Center. The standalone AWS account isn't managed by AWS Organizations. You can associate only one instance of IAM Identity Center with a standalone AWS account and use that instance for application assignments within that standalone AWS account. @@ -38,0 +39,2 @@ To enable IAM Identity Center, sign in to the AWS Management Console by using on +Use the following table to compare the capabilities provided by the instance type: + @@ -68 +70 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Identity Center directory +IAM Identity Center and AWS Organizations